Privacy Policy

Who we are

CrewLayout (“CrewLayout”, “we”, “us”) runs crewlayout.com and the CrewLayout app. CrewLayout helps trade shops run jobs, estimates, invoices, and crew hours. Questions about privacy: crewlayout.com@gmail.com.

This policy covers people who visit our website, shop owners who sign up, crew members who use the app, and the shop’s own customers whose details a shop puts into CrewLayout.

Your shop’s data belongs to your shop

When a shop enters its customers, jobs, photos, and crew hours, that information belongs to the shop. CrewLayout stores and handles it for the shop so the shop can use the app. We don’t use it for our own purposes, like marketing to your customers.

If you are a shop’s customer or crew member and have a question about your information, please contact that shop first. We will help the shop answer you, and you can always email us as well.

What we collect

• Owner account: email address and password. Sign-in is handled by our database and login provider, Supabase. The app does not keep your password on your phone in readable form.
• Business profile: shop name, owner name, business address, phone, email, logo, trade, license or invoice details you choose to add, and invoice and message templates.
• Crew: each worker’s name, role, optional email, and 4-digit PIN; clock-in and clock-out times, the job they clocked in to, driving time, “No lunch” choices, notes, and time-correction requests.
• Your customers and jobs: customer names, addresses, phone numbers, and emails; job notes, scopes, estimates, invoices, amounts, payment status, materials, job photos, voice memos, and plan files; and any past estimates you import to train Write Scope.
• Billing: On the website, Stripe collects the card for a Shop plan bought there. We receive the email, plan, subscription status, and Stripe customer and subscription IDs. We never see or store a full card number. On the iPhone app, the Shop plan is an Apple in-app subscription. Apple charges the Apple ID. We receive a signed purchase record (product id com.crewlayout.shop.monthly, whether it is active, and which shop it is tied to). We do not receive the Apple ID password or the card number.
• Notifications: if you turn on notifications, we keep the push address your browser gives us so we can send you alerts.
• Precise geolocation (sensitive personal information, optional): if a crew member agrees in the iPhone app, we collect precise location only while that person is clocked in and the app is open. We record a point at clock-in, at clock-out, and about every five minutes during that shift. We do not collect it in the background, when the app is closed, or while the person is clocked out. The shop owner can see the latest point for that shop’s shift. We keep each point for 90 days, then delete it. We also delete it when the shop account is deleted. The crew member can say no, or turn it off at any time, and can still clock in. We do not sell it, share it for advertising, or use it to track people across other companies’ apps or websites.
• Website clock-in and clock-out location check, also in the iPhone app (sensitive personal information, optional): if a shop owner turns on the location check in Settings, a crew member using the website or the iPhone app is asked first, on their own phone, and can say no and still clock in. If they agree, the website or the iPhone app is asked for one location when they clock in and one when they clock out. That is two points per shift. There is no tracking in between, in the background, or while the person is clocked out. These points use the same consent, the same storage and the same 90-day deletion as the iPhone app on-shift location above, and in the iPhone app this check is in addition to those on-shift points. Only the shop owner can see them, next to that person’s hours (“At job”, the distance from the job, or “No location”). Foremen and other crew cannot see them. If the person was outside the job’s radius they may add a short note for the owner, which is optional. To tell whether a point is near the job, the owner’s app sends the job’s street address, and nothing else, to the U.S. Census Bureau’s public geocoding service to get coordinates for it. We do not sell this location or use it for ads. Apart from this optional check, the website does not collect device location. A job address someone types is not GPS.
• Technical data: like almost every website, our host keeps basic server logs, such as IP address, browser type, pages requested, and time.
• Messages to us: anything you send when you email us.

Precise location is collected only in the two cases described in the list above (the iPhone app on-shift location, and the clock-in and clock-out check on the website and in the iPhone app). Clock-in does not require it.

How we use it

We use this information to run CrewLayout: signing you in, syncing the shop between the owner’s and crew’s phones, storing photos, writing scopes when you ask, sending sign-in and password-reset emails, billing, answering support emails, keeping the service secure, and fixing problems. We don’t sell personal information. We don’t share it for targeted advertising, and we don’t use your customers’ information to market to them.

Companies that help us run CrewLayout

We share information only with service providers that need it to run the product, and only for that purpose:

• Supabase: database, owner sign-in, and private storage for job photos.
• Netlify: hosts the website and app and runs our server code (including server logs).
• xAI: powers Write Scope. When you tap Write Scope, we send xAI the job notes, job title, job address, customer name, materials, hours, billing type and amount or rate, your shop name, and up to five of your past approved scopes to use as examples. Nothing goes to xAI unless you tap Write Scope. Voice measure: when you tap Read measurements, we send the measurement text you spoke or typed to xAI to turn it into rows. In the iPhone app we ask your permission before the first Write Scope or Voice measure, and you can turn AI features off in Settings → Legal & data. xAI keeps requests for up to 30 days to detect abuse and says it does not use them to train its models without permission.
• Apple: for a Shop plan bought in the iPhone app, Apple processes the subscription (price, any introductory offer, renewal, and cancellation) under Apple’s terms. We send Apple the shop id with the purchase so the subscription is tied to that shop, and Apple sends us a signed result. Deleting the CrewLayout account does not cancel that Apple subscription.
• Stripe: processes a Shop plan bought on the website, and — if a shop turns on Card payments — invoice Pay now charges to the shop’s connected Stripe account. Card numbers go to Stripe, not to CrewLayout. The iPhone app does not open a Stripe checkout for the Shop plan.
• Cloudflare Turnstile: on the website, sign-in, sign-up, and password reset can show a Cloudflare challenge when that check is turned on. The iPhone app build ships with that check off, so it does not load Cloudflare’s challenge script.
• Google: Gmail sends our sign-in and password-reset emails, and the invoice and estimate emails you send from the app (see below). Google Fonts delivers the website’s font, so Google receives your IP address when a page loads. We also use Google Search Console to see how our site shows up in search. It doesn’t get your app data.
• Your browser’s push service (for example Apple, Google, or Mozilla) delivers notifications if you turn them on.

Texts you send to customers open your phone’s own messaging app with the message filled in. The text is sent from your phone and number, not by CrewLayout.

Emails are different. When you tap Email on an invoice or estimate, CrewLayout builds a PDF, stores it in private storage at a long, unguessable web link, and sends the email for you through Google’s Gmail service, from crewlayout.com@gmail.com, with your shop’s name in the From line and your email as the reply address. Anyone who has that link can open the PDF, so don’t post or forward it.

iPhone app: the app uses the camera, photo library, microphone and Apple speech recognition only when you tap those features. It asks for location only after a crew member agrees, and only while clocked in with the app open: one point at clock-in and one at clock-out for the location check, plus the on-shift points described above. It does not use contacts or an advertising identifier. Location is not used for ads or tracking.

Phone alerts (push notifications): if a shop owner turns on Phone alerts in the iPhone app, we store the device token Apple gives that iPhone, linked to the shop and the owner’s sign-in, and send it with the alert text to Apple Push Notification service, which delivers alerts such as “Invoice paid” or a crew member’s time-fix request. Alerts don’t include customer names. We delete the token when you sign out, turn alerts off, or delete your account, and when Apple tells us the app is no longer installed.

Each service provider is required to protect your information to the same or an equivalent standard as described in this policy.

Voice notes: if you tap the microphone to dictate, your phone’s browser may send the audio to Apple or Google to turn it into text, under their terms. Voice memos you record and save are stored with your shop’s job data.

We may also share information if the law requires it, to protect people or the service, or as part of a sale or merger of the business. If the business is sold, this policy would keep applying to your information.

Notice at collection (California): categories we collect are identifiers (name, email, phone), commercial information (estimates, invoices, payment status), professional information (crew hours, job notes, photos you add), and, only if a crew member opts in (on-shift in the iPhone app, or at clock-in and clock-out on the website or in the iPhone app), precise geolocation. We use them to provide the app to the shop: jobs, hours, and optional on-shift or clock-in/clock-out location for that shop. We keep shop data while the account is open, location points for 90 days, and backups for up to 30 days after deletion. We do not sell personal information. We do not share it for cross-context behavioral advertising. Precise geolocation is sensitive personal information. You can ask to know, delete, correct, or get a copy, and you can ask us to limit our use of precise geolocation, by emailing crewlayout.com@gmail.com or by turning location off in the app or on the website. We will not discriminate against you for asking. We do not share personal information with other companies for their own direct marketing (California “Shine the Light”).

Customer card payments

If a shop turns on Card payments, customers who tap Pay now on an invoice pay through Stripe Checkout. Stripe processes the payment and pays out to the shop’s bank. CrewLayout does not store card numbers and does not take a cut of those payments. Shop and customer contact details needed to create the Checkout Session (for example email and invoice amount) are sent to Stripe for that payment.

Cookies, local storage, and Do Not Track

We don’t use advertising or analytics trackers, tracking pixels, or tracking cookies. The app saves some data on your phone (using browser storage and an offline cache) so it can work without signal and keep you signed in. For example, it stores punches waiting to send, your shop’s data, and your sign-in session.

Because we don’t track visitors across other websites, we don’t change anything when your browser sends a “Do Not Track” or Global Privacy Control signal. There is no cross-site tracking to turn off.

Anyone who can open your unlocked phone can open your shop in the app. Please use a screen lock and sign out on shared devices. Clearing the site’s data on a phone removes the copy on that phone. It does not delete your shop from our servers.

How long we keep data

We keep shop data while your account is active. When a shop cancels, you can ask us for a copy of your data. Before deletion, you can ask for an export of your shop’s data by emailing crewlayout.com@gmail.com. We delete the shop’s data within 30 days after cancellation. Backup copies are deleted within 30 more days. We may keep a small amount longer when the law requires it or for legitimate business needs, like billing and tax records or resolving a dispute.

See, fix, copy, or delete your information

Owners can see and edit their shop’s information in the app at any time. Delete your account: owners can delete their account and shop in the iPhone app: Settings → Legal & data → Delete account and shop. This deletes shop data, photos, crew records and the sign-in account. It does not cancel an Apple subscription; cancel that in iPhone Settings → your name → Subscriptions. We keep records the law requires (for example payment and tax records held by Apple or Stripe) and remove backups within 30 days.

To get a copy of your data, correct something you can’t change yourself, or delete your account or shop by email, email crewlayout.com@gmail.com from the email on the account. We may need to confirm it’s you before acting. We aim to respond within 30 days.

Consent: you can withdraw AI consent at any time in the app’s Settings → Legal & data, and turn Phone alerts off in Settings → Legal & data or in iOS Settings → CrewLayout → Notifications.

Crew members and a shop’s customers can ask the shop to update or remove their information. You can also email us, and we will work with the shop. We handle these requests for everyone, wherever you live.

Security

We take reasonable steps to protect information for a business our size. Connections use encryption (HTTPS). You need to sign in to reach shop data, and crew need the company code and their own PIN. Job photos are kept in private storage that is only reachable through our access checks. No system is perfectly secure, and we can’t promise that information will never be accessed without permission.

If we learn of a security breach involving your personal information, we will tell affected shops and people without unreasonable delay, as California law requires. When a shop’s customers or crew are affected, we will give the shop the details it needs to notify them.

Kids

CrewLayout is a business tool for adults. It isn’t meant for children, and we don’t knowingly collect information from children under 13.

Where data is stored

CrewLayout is based in California. Our service providers store and process data in the United States and may also do so in other countries where they operate.

Changes to this policy

If we update this policy, we’ll post the new version here with a new effective date. For important changes, we will email shop owners or show a notice in the app at least 15 days before the change takes effect.

Contact

Email crewlayout.com@gmail.com.